KACE Cloud Mobile Device Manager – MDM Features

[MUSIC PLAYING] Hello, my name is James Rico. I'm a sales engineer with Quest Software. Today, we are going to looking at the unique features of KACE Cloud Mobile Device Manager. Today, we're faced with a growing number of remote workers using various operating systems, and it is imperative we effectively manage those devices to keep your data secure. So let's get started by taking a look at how KACE Cloud Mobile Device Manager can help you do that. We'll start by talking about enrolling your devices and how enrollment-based management is different than traditional device management. So typically, in the old days, you'd have a Windows machine. We'd have an agent, we put on there and some sort of server or application that we would be managing, that endpoint via that agent. With the KACE Cloud MDM, we're going to do in an enrollment-style-based management. So a user will log into their device, authenticate, and then we're going to drop a profile on that endpoint and manage that device. So there's a couple of ways you can do that. I'm logged into our KACE Cloud MDM product right now. If I go over to the Settings tab, we can take a look at there's some different integrations we can do back here. So from the Android side of things, we can tie into Google Play. If you have Samsung Knox devices, we can integrate with Samsung Knox. If you have Mac OS, Apple OS, or any of the iOS devices or even Apple TV, we can tie in with the Apple school account or Apple business account and do DEP enrollment. On the Windows side of things, there's a manual enrollment, and there's also a autopilot enrollment that can be done in conjunction with Azure AD. So again, what this will allow you to do is a user can get a new device that's been reset or it's brand new out of the box experience. They can log into that device with their company email, they'll authenticate, and then whatever profile you've built out in the KACE Cloud MDM will get provisioned against that endpoint. So at a high level, we're looking at the library screen here right now. These are the high level categories of things we can do and manage against those endpoints. So basically you can set it up and make it ready for the user to do their work. There are two types of enrollment. So there's a company-owned experience, like the company owns the device. And there's also a BYOD experience. So every company probably has this experience. So you'll issue somebody a laptop, but then they also have their personal mobile device that you would also want to provision so they can get their work email or have access to work resources. So you're one person with multiple devices, so with MDM, we're able to manage that. If it is a BYOD device or a device that's already in use in the field, like someone's already using this, so you don't want to do a reset, it is a company-owned device, so you do need to hook into that and start managing it. So we can do that by, again, allowing the user to enroll that device. So I'm on the Device tab, and here in the middle, if I click on Enrollment Options, I can click on Enrolled Devices. And when we open that up, on the right side pane over here, we'll have instructions for enrolling devices. So it defaults to Android for Work, but if I open that up, maybe I have an iOS device. Then my set of instructions down here will change, and I can copy this to the clipboard, email these instructions to a user or put them in a KB article somewhere where they can access it. And they're basically going to click on your enrollment URL, and that's going to be tied to your tenant. So when they click that, they'll get prompted to answer a few questions. Basically do you want to allow this device to be managed, is it company-owned or BYOD. So we'll tap through that. And then when they're finished, we're going to be managing that endpoint. So we'll be able to drop configurations, drop restrictions on it, applications, all the things you'd want to do to manage that endpoint. OK, so now we've got our devices enrolled. Again, being a Windows, Mac, Android, iOS, and they're all going to show up in the center pane. And just for the demonstration, we'll suppose we've already set up and configured those items and people are actively using them. So what are some unique features and things you can do by using an enrollment style of management against an endpoint? So one thing is we'll go ahead and grab a virtual machine here, and I've got set up for testing, we'll take a look at it. But we can do device actions against that. So the name of the machine is right here. So this is a Windows 11 Pro machine. It's enrolled, it's in compliance, it's responding. So one of the things about enrollment-style management is we're really managing for a device to be in a state. So you've set up configurations, applications, things you want to be on there, and we're constantly monitoring that to make sure that device is in a compliant state. So once it's there, what are things we may want to do? So some device actions we might run against an endpoint or we want to update an inventory. So we want to tell that device, say, I need to know your status right now and give me a detailed inventory of the device, the configuration, the application. So that's a device action you can run. If I go to More Actions here, we can do other things-- unenroll, reset, delete the device, restart the device, shut the device down. Because this is a Windows device or